Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: U+NjaW9GbYQrgIAK+CEvc/ynymOkuCldvB9saX69UsE=
Subject key identifier: 5E:CC:02:85:7D:F9:49:75:92:FE:22:31:93:ED:C6:77:4B:BC:1F:93
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0196759E5F9787F8832D354A654C22FFECF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0989
Signing time: Sun 27 Apr 2025 05:00:35 +0000
Manifest this update: Sun 27 Apr 2025 05:00:35 +0000
Manifest next update: Mon 28 Apr 2025 05:00:35 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: HhDHqLaMwINdulfYd5rAtA76xJ1i0zhRNxnyoJRz+4U=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5f:97:87:f8:83:2d:35:4a:65:4c:22:ff:ec:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 27 05:00:35 2025 GMT
Not After : Apr 28 05:00:35 2025 GMT
Subject: CN=5ecc02857df9497592fe223193edc6774bbc1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:c9:a5:05:83:af:dd:9d:8c:93:ab:30:a4:
c3:48:6f:26:d3:cd:c3:82:18:d1:32:bc:b2:b4:e8:
e7:41:a7:a1:2a:e7:bb:ad:cd:04:85:fe:f5:69:b0:
a2:96:aa:bb:0f:52:d2:6c:72:d0:28:5f:c6:cc:e9:
87:5e:64:4c:d2:b7:28:28:a7:7a:0f:e9:50:57:6d:
43:27:bc:f0:6d:4d:a1:cd:cd:08:bc:6c:16:c7:c3:
5e:bb:96:78:0c:1b:e6:af:f5:45:fe:ac:c8:ce:67:
43:88:f2:15:a2:df:aa:58:cf:44:ad:c2:1b:c8:78:
60:89:54:3b:1f:90:ed:e1:b0:95:ec:71:6b:e3:0b:
ec:35:84:ef:b1:89:87:17:ef:e9:d8:77:4a:aa:da:
3c:c9:b5:49:6d:e2:e2:2a:66:fe:6c:bb:f0:ae:1f:
85:33:d2:53:a7:5e:03:cf:4d:e0:8f:e3:5e:15:63:
e2:ba:cd:6b:56:78:eb:66:8a:83:a1:d8:67:ab:e1:
bd:08:d6:1b:d6:bf:74:5c:a2:a4:19:69:0e:6c:05:
e8:73:34:0c:c2:28:b2:50:5b:f1:2c:e2:15:4f:98:
44:6e:1c:42:7f:2f:47:09:69:8f:6d:c6:1b:7e:60:
00:0b:62:77:55:a1:a3:cd:8f:75:96:02:38:d3:7e:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:02:85:7D:F9:49:75:92:FE:22:31:93:ED:C6:77:4B:BC:1F:93
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:5e:07:9e:58:a0:fd:7c:cf:f3:f4:8f:6b:1f:98:91:88:
9c:9a:51:1e:6c:40:ee:07:3b:0c:cb:51:f6:65:8b:84:53:5a:
5e:49:57:68:59:79:ca:f7:0e:65:81:37:a5:56:73:fa:23:a2:
23:fd:d9:41:2a:f2:06:81:c1:a3:9b:14:b6:70:98:16:d5:83:
75:0b:83:c3:c1:fa:70:2a:44:fb:09:c6:a5:e0:e0:0c:68:6b:
11:e2:52:36:23:f3:50:ff:d3:0f:c5:e9:86:40:cc:46:67:80:
63:09:4d:49:54:29:c8:68:f6:dc:b5:34:c4:15:1c:6f:ef:55:
2e:dc:bc:df:8c:10:f9:ab:81:14:46:fe:4b:3f:0c:ef:c1:3c:
0c:8f:86:d3:9a:64:b3:29:48:93:0e:79:9b:ee:6e:ff:28:46:
f3:a3:6b:0b:70:4a:42:20:9b:44:60:62:51:4e:b3:61:af:e2:
78:5e:d9:2e:a1:8e:e6:d6:55:74:a9:de:9e:df:12:b7:13:fa:
b3:05:7a:e2:66:2f:7e:91:b0:88:b8:91:ca:bf:56:f9:2e:f6:
cb:dd:59:ff:b0:62:39:60:65:1f:e2:08:dc:6d:86:bf:c8:5a:
1d:22:28:66:6d:aa:1d:06:94:17:20:91:27:6f:72:b8:ee:e9:
b1:93:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:55 2025 by rpki-client